Sr. Manager, Business Resilience — Response Operations (Remote)

CrowdStrike Inc.; Sacramento (CA); Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Market-leading compensation and equity

Wellness programs

Paid parental and adoption leaves

Professional development opportunities

Employee networks and volunteer机会

Job summary

CrowdStrike Inc. is seeking a Sr. Manager of Response Operations to lead the enterprise crisis response program within the Business Resilience organization.

You will own standards, playbooks, activation processes and after-action improvements, ensuring crisis teams respond effectively across business, technology and customer-impacting events. The role requires SaaS experience, on-call commitment, and strong executive communication skills.

Qualifications

• SaaS / Security SaaS environment experience preferred.
• Experience owning a corporate crisis/incident management program.
• Strong program-management discipline across multi-stakeholder dependencies.

Responsibilities

• Set strategy, standards, roadmaps and playbooks for crisis response readiness.
• Lead designated on-call shift and assume Incident Commander responsibilities when required.
• Coordinate with crisis teams and ensure accurate SitReps, briefs and AARs.
• Design exercises and training; drive after-action reviews and improvements.
• Hire, mentor and grow the Response Operations team to ensure coverage.

Skills

Crisis management

Executive communication

Leadership

On-call readiness

Customer-facing perspective

Education

Bachelor's degree or equivalent practical experience

Tools

Crisis management software

Job description

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

The Sr. Manager, Response Operations leads the Response Operations function of CrowdStrike's Business Resilience (BR) organization. This role owns the enterprise crisis response framework, including standards, plans, playbooks, activation processes, exercises, training, readiness cadences, and after-action improvement.

Response Operations enables CrowdStrike’s crisis teams to respond effectively across a range of business, technology, cyber, product, security, and customer-impacting events. The role is not the standing Incident Commander for every event, but it holds a designated shift in the on-call rotation and must be ready to assume IC responsibilities during a coverage gap, surge, or escalation. As the accountable program lead, this role also carries an 'always on' posture: you stay aware, reachable, and ready to engage whenever a significant event is developing.

The successful candidate combines crisis-program ownership, SaaS/customer-impact fluency, operational judgment under pressure, executive communication, and the ability to build durable response capability across the enterprise.

Location :

This position is open to candidates located anywhere in the United States or Canada. However, due to business needs and team collaboration requirements,

candidates must be willing and able to work a schedule aligned with Pacific Time (PT) business hours, regardless of their location.

What You’ll Do:

Primary Responsibilities:

• Set the strategy, standards, roadmap, governance, plans, playbooks, activation processes, and operating cadences that keep CrowdStrike's crisis teams ready.
• Take a designated shift in the crisis team on-call rotation, and assume Incident Commander responsibilities when a coverage gap or escalation requires it. Outside your shift, you remain the accountable program lead: aware of what's developing, reachable, and ready to engage.
• Partner with crisis team leads to align roles, escalation paths, continuity support, customer-impact considerations, and handoffs across significant events.
• Own SitReps, executive briefings, and AARs that are accurate and complete on version one. Work from source information to establish facts, then present them clearly for each audience.
• Design and facilitate exercises and training; lead after-action reviews; and drive corrective actions, lessons learned, and readiness improvements through closure.
• Support executive leadership during activations and steady-state planning. Bring pre-packaged options and decisions rather than open-ended questions, and shield leaders from logistical lift.
• Hire, develop, and coach the Response Operations team, and build enough bench depth that response capability and on-call coverage never depend on one person.

Secondary Responsibilities:

• Partner with Business Continuity, Enterprise Risk Management, Incident Management, Information Security, Product Security, Global Security/GSOC, Communications, and Customer Response to maintain aligned resilience capabilities.

What You’ll Need:

SaaS / Security SaaS Environment (Required): Experience operating in a technology, SaaS, cloud, or security-product environment is required; security SaaS experience is strongly preferred. You understand how a product or service incident translates into customer impact, contractual exposure, trust considerations, and pressure on customer-facing teams. This is a corporate crisis role inside a technology product company, not a public-sector or first-responder emergency-management, physical security, or GSOC role.

On-Call & "Always On" Commitment (Required): Willingness to take a designated shift in the crisis team on-call rotation, including evenings, weekends, and holidays when on shift. Also willingness to stay reachable as the accountable program lead when significant events develop outside your shift.

Customer-Facing Incident Perspective (Strongly Preferred): Experience managing incidents from a Customer Success or customer-facing perspective (customer escalations, trust and retention, executive customer communications), rather than solely from an internal or press/crisis-communications function.

Crisis Program Ownership: Demonstrated experience owning a corporate crisis management, incident management, or business resilience program on an ongoing basis, backed by strong program-management discipline across multi-stakeholder dependencies and recurring deliverables.

Incident Command Capability: Demonstrated time serving as, or directly supporting, an IC or response lead, with a credible ability to step into the IC seat during an activation.

People Leadership: Experience building and leading a team, including hiring, performance management, and coaching. Experience managing managers or senior specialists is a plus.

Executive Communication & Influence: A track record of executive-ready writing and briefing, and of persuading senior stakeholders in sensitive, high-stakes situations while preserving relationships.

Experience: 12+ years in crisis/incident management, business resilience, or technology operations leadership, including significant time in a SaaS or technology product environment. Can be flexible depending on experience and potential.

Education: Bachelor's degree or equivalent practical experience.

Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

Bonus Points:

• Experience with crisis management software platforms and collaboration tools
• Knowledge of ISO 22301 and related resilience standards
• Familiarity with NIMS / Incident Command System (ICS), adapted to a corporate rather than public-sector context
• Certifications in business continuity or resilience (e.g., CBCP, MBCI, CEM). Valued, but not a substitute for SaaS and product-incident experience
• Experience developing customer-facing incident communications

#LI-SC1#LI-Remote

Benefits of Working at CrowdStrike:

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--